Anti-tamper bypass via support utility

Protection bypass in BeyondTrust Endpoint Privilege Management for Windows before 26.1.2 allows local users to execute code outside anti-tamper controls. The flaw lies in the interaction between a support utility and the agent's tamper protection controls: the utility process is not always subjected to the intended protections, so a privileged local actor can influence that process and run code beyond the product's protected scope. Exploitation requires local access, an existing elevated process context, and additional endpoint-specific preconditions; published records do not show a path for unauthenticated or low-privilege attackers.